Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72.cer
File:                     e756af05-9fc8-4137-b113-f785a93b1c72.cer (raw, json)
Hash identifier:          bJ1a1QS64RtMclqhEvnbGZS+zKVGFiV2p+671hnCegs=
Subject key identifier:   D3:FC:12:CC:5E:A8:27:98:A0:55:FC:C6:34:0B:46:67:E9:BF:8A:94
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846E7791A35C281F15B8D01D8E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72/e756af05-9fc8-4137-b113-f785a93b1c72.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 17 Aug 2024 08:28:45 +0000
Certificate not after:    Fri 20 Nov 2026 09:28:45 +0000
Subordinate resources:    IP: 23.186.216.0/24
                          IP: 2602:f845::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e7:79:1a:35:c2:81:f1:5b:8d:01:d8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 17 08:28:45 2024 GMT
            Not After : Nov 20 09:28:45 2026 GMT
        Subject: CN=e756af05-9fc8-4137-b113-f785a93b1c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:38:b3:d5:e5:a7:53:c8:69:f7:3b:d0:5c:42:
                    7f:77:8d:11:59:50:30:82:c6:ba:19:62:92:63:4b:
                    25:fa:61:21:32:92:53:74:57:91:75:ed:5b:bb:92:
                    14:1d:aa:70:68:87:49:57:09:a4:5e:12:16:63:22:
                    73:40:ed:5d:d4:11:a1:27:ea:91:36:6c:9e:ae:a0:
                    0e:37:ad:e6:03:57:05:30:81:c4:99:8f:57:8e:fa:
                    14:10:75:31:69:7a:35:e5:b3:76:ea:be:16:e5:08:
                    0e:d3:cd:c4:a0:25:03:29:30:b8:db:48:a0:e1:3a:
                    f2:92:07:ad:4b:64:3d:15:50:02:0f:e2:eb:b2:ce:
                    ce:b7:04:19:29:1f:ac:f8:d2:5c:07:16:c0:32:82:
                    18:e7:51:09:e5:2b:8f:14:e7:61:44:4c:3f:91:b1:
                    7b:d2:8c:b6:39:3e:68:b9:c5:03:8d:8a:76:37:51:
                    4b:7b:66:b2:7e:5e:bc:33:99:a9:2d:f1:98:0d:b9:
                    bc:43:a6:1b:c6:99:52:fe:04:3e:dc:d5:70:55:fb:
                    80:c0:9f:0b:c2:d4:ee:03:11:af:22:bd:7c:d6:10:
                    48:78:4e:d9:af:da:9f:57:77:9f:c5:41:d0:89:90:
                    c9:cb:6f:07:80:51:d8:f8:55:77:18:3a:0d:f8:d9:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FC:12:CC:5E:A8:27:98:A0:55:FC:C6:34:0B:46:67:E9:BF:8A:94
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e756af05-9fc8-4137-b113-f785a93b1c72/e756af05-9fc8-4137-b113-f785a93b1c72.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.216.0/24
                IPv6:
                  2602:f845::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:aa:d5:7e:fb:66:b7:5f:47:9a:1e:67:9c:74:40:af:68:c7:
         74:9f:2b:8f:03:32:bb:20:19:01:94:bb:06:fc:d8:11:c0:33:
         6e:4a:75:a2:4b:ac:c8:d4:15:31:e2:41:63:ca:38:ee:ac:ef:
         19:f1:86:fa:74:70:66:38:20:c3:74:db:1e:95:65:c6:29:ee:
         03:60:e8:5c:b2:e6:2a:cb:4c:df:b1:5a:17:be:23:c3:88:fe:
         58:7a:75:b2:95:44:eb:94:da:e5:cf:e5:b7:10:14:36:46:61:
         01:44:87:89:df:e0:19:71:a7:e0:f9:92:76:94:39:8f:a9:ed:
         45:85:ad:78:56:e8:18:a8:32:35:b7:95:b4:df:8d:a4:0e:f9:
         d0:56:0d:c5:24:6d:21:71:51:0f:ee:b1:a6:92:20:c2:62:4a:
         81:b9:c7:d9:32:e4:ca:56:b2:cf:52:fb:ff:30:55:68:10:b0:
         0f:4c:2a:53:3b:d3:ef:c4:4b:07:a1:d2:7e:ba:0d:a3:21:58:
         b9:89:47:e6:b6:18:67:79:ad:5f:04:a8:c6:a0:3e:d9:39:d1:
         b8:dc:b2:dd:fd:7b:90:15:d5:03:63:9f:bc:e5:fa:76:ce:74:
         09:60:4e:98:b7:4f:78:2e:c2:0c:41:19:49:74:41:76:fa:82:
         5e:ac:29:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----